Commit | Line | Data |
---|---|---|
ffca4c22 | 1 | /* Safe automatic memory allocation. |
49114fd4 | 2 | Copyright (C) 2003, 2006-2007, 2009-2011 Free Software Foundation, Inc. |
ffca4c22 AW |
3 | Written by Bruno Haible <bruno@clisp.org>, 2003. |
4 | ||
5 | This program is free software; you can redistribute it and/or modify | |
6 | it under the terms of the GNU Lesser General Public License as published by | |
7 | the Free Software Foundation; either version 2, or (at your option) | |
8 | any later version. | |
9 | ||
10 | This program is distributed in the hope that it will be useful, | |
11 | but WITHOUT ANY WARRANTY; without even the implied warranty of | |
12 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the | |
13 | GNU Lesser General Public License for more details. | |
14 | ||
15 | You should have received a copy of the GNU Lesser General Public License | |
16 | along with this program; if not, write to the Free Software Foundation, | |
17 | Inc., 51 Franklin Street, Fifth Floor, Boston, MA 02110-1301, USA. */ | |
18 | ||
19 | #include <config.h> | |
20 | ||
21 | /* Specification. */ | |
22 | #include "malloca.h" | |
23 | ||
0f00f2c3 LC |
24 | #include "verify.h" |
25 | ||
9157d901 LC |
26 | /* Use the system functions, not the gnulib overrides in this file. */ |
27 | #undef malloc | |
28 | ||
ffca4c22 AW |
29 | /* The speed critical point in this file is freea() applied to an alloca() |
30 | result: it must be fast, to match the speed of alloca(). The speed of | |
31 | mmalloca() and freea() in the other case are not critical, because they | |
32 | are only invoked for big memory sizes. */ | |
33 | ||
34 | #if HAVE_ALLOCA | |
35 | ||
36 | /* Store the mmalloca() results in a hash table. This is needed to reliably | |
37 | distinguish a mmalloca() result and an alloca() result. | |
38 | ||
39 | Although it is possible that the same pointer is returned by alloca() and | |
40 | by mmalloca() at different times in the same application, it does not lead | |
41 | to a bug in freea(), because: | |
42 | - Before a pointer returned by alloca() can point into malloc()ed memory, | |
43 | the function must return, and once this has happened the programmer must | |
44 | not call freea() on it anyway. | |
45 | - Before a pointer returned by mmalloca() can point into the stack, it | |
46 | must be freed. The only function that can free it is freea(), and | |
47 | when freea() frees it, it also removes it from the hash table. */ | |
48 | ||
49 | #define MAGIC_NUMBER 0x1415fb4a | |
50 | #define MAGIC_SIZE sizeof (int) | |
51 | /* This is how the header info would look like without any alignment | |
52 | considerations. */ | |
53 | struct preliminary_header { void *next; char room[MAGIC_SIZE]; }; | |
54 | /* But the header's size must be a multiple of sa_alignment_max. */ | |
55 | #define HEADER_SIZE \ | |
56 | (((sizeof (struct preliminary_header) + sa_alignment_max - 1) / sa_alignment_max) * sa_alignment_max) | |
57 | struct header { void *next; char room[HEADER_SIZE - sizeof (struct preliminary_header) + MAGIC_SIZE]; }; | |
0f00f2c3 | 58 | verify (HEADER_SIZE == sizeof (struct header)); |
ffca4c22 AW |
59 | /* We make the hash table quite big, so that during lookups the probability |
60 | of empty hash buckets is quite high. There is no need to make the hash | |
61 | table resizable, because when the hash table gets filled so much that the | |
62 | lookup becomes slow, it means that the application has memory leaks. */ | |
63 | #define HASH_TABLE_SIZE 257 | |
64 | static void * mmalloca_results[HASH_TABLE_SIZE]; | |
65 | ||
66 | #endif | |
67 | ||
68 | void * | |
69 | mmalloca (size_t n) | |
70 | { | |
71 | #if HAVE_ALLOCA | |
72 | /* Allocate one more word, that serves as an indicator for malloc()ed | |
73 | memory, so that freea() of an alloca() result is fast. */ | |
74 | size_t nplus = n + HEADER_SIZE; | |
75 | ||
76 | if (nplus >= n) | |
77 | { | |
78 | char *p = (char *) malloc (nplus); | |
79 | ||
80 | if (p != NULL) | |
1cd4fffc LC |
81 | { |
82 | size_t slot; | |
ffca4c22 | 83 | |
1cd4fffc | 84 | p += HEADER_SIZE; |
ffca4c22 | 85 | |
1cd4fffc LC |
86 | /* Put a magic number into the indicator word. */ |
87 | ((int *) p)[-1] = MAGIC_NUMBER; | |
ffca4c22 | 88 | |
1cd4fffc LC |
89 | /* Enter p into the hash table. */ |
90 | slot = (unsigned long) p % HASH_TABLE_SIZE; | |
91 | ((struct header *) (p - HEADER_SIZE))->next = mmalloca_results[slot]; | |
92 | mmalloca_results[slot] = p; | |
ffca4c22 | 93 | |
1cd4fffc LC |
94 | return p; |
95 | } | |
ffca4c22 AW |
96 | } |
97 | /* Out of memory. */ | |
98 | return NULL; | |
99 | #else | |
100 | # if !MALLOC_0_IS_NONNULL | |
101 | if (n == 0) | |
102 | n = 1; | |
103 | # endif | |
104 | return malloc (n); | |
105 | #endif | |
106 | } | |
107 | ||
108 | #if HAVE_ALLOCA | |
109 | void | |
110 | freea (void *p) | |
111 | { | |
112 | /* mmalloca() may have returned NULL. */ | |
113 | if (p != NULL) | |
114 | { | |
115 | /* Attempt to quickly distinguish the mmalloca() result - which has | |
1cd4fffc LC |
116 | a magic indicator word - and the alloca() result - which has an |
117 | uninitialized indicator word. It is for this test that sa_increment | |
118 | additional bytes are allocated in the alloca() case. */ | |
ffca4c22 | 119 | if (((int *) p)[-1] == MAGIC_NUMBER) |
1cd4fffc LC |
120 | { |
121 | /* Looks like a mmalloca() result. To see whether it really is one, | |
122 | perform a lookup in the hash table. */ | |
123 | size_t slot = (unsigned long) p % HASH_TABLE_SIZE; | |
124 | void **chain = &mmalloca_results[slot]; | |
125 | for (; *chain != NULL;) | |
126 | { | |
127 | if (*chain == p) | |
128 | { | |
129 | /* Found it. Remove it from the hash table and free it. */ | |
130 | char *p_begin = (char *) p - HEADER_SIZE; | |
131 | *chain = ((struct header *) p_begin)->next; | |
132 | free (p_begin); | |
133 | return; | |
134 | } | |
135 | chain = &((struct header *) ((char *) *chain - HEADER_SIZE))->next; | |
136 | } | |
137 | } | |
ffca4c22 AW |
138 | /* At this point, we know it was not a mmalloca() result. */ |
139 | } | |
140 | } | |
141 | #endif |